← Blog

cold-calling

Is B2B Cold Calling Legal? TCPA & DNC Rules (2026)

Is B2B Cold Calling Legal? TCPA & DNC Rules (2026)

Cold calling in B2B isn’t illegal, but it is heavily regulated, especially in the U.S. under the TCPA, TSR, and state telemarketing laws, and in markets like the EU and UK under privacy and marketing rules. With over 249 million numbers on the U.S. Do Not Call Registry and roughly 1.2 million robocall complaints in FY 2023, sales leaders can’t wing it. This guide translates the legal landscape into a practical playbook SDR teams can actually execute.

The Short Answer

Yes. B2B cold calling is legal in the United States. A live rep dialing a business line, during normal hours, to pitch a business product, and stopping when asked, is exactly what the rules allow.

What gets companies sued is not cold calling itself. It is the way some teams do it:

  • Robocalls, prerecorded voicemail drops or AI voices sent to cell phones without consent
  • Calling mobile numbers on the National Do Not Call Registry and assuming "it's B2B, so it's fine"
  • Ignoring someone who already said "don't call me again"
  • Calling outside legal hours, or misrepresenting who you are and what you sell

The rest of this guide explains the rules behind each of those lines, what the exemptions for B2B calls really cover, how the picture changes in Canada, the UK and Germany, and the setup we use to keep a calling program on the right side of them.

One note before we start: this is a practical guide from a team that runs outbound calling every day, not legal advice. If you are building a high-volume program, have counsel review your specific setup.


Which Laws Govern B2B Cold Calls in the U.S.?

Three layers apply to almost every U.S. sales call:

Rule Who enforces it What it controls How B2B is treated
Telemarketing Sales Rule (TSR) FTC Do Not Call Registry, honesty in sales calls, recordkeeping Most B2B calls are exempt, with two important exceptions
Telephone Consumer Protection Act (TCPA) FCC, state attorneys general and private lawsuits Robocalls, autodialers, prerecorded and AI voices, Do Not Call, calling hours No general B2B exemption
State telemarketing laws State attorneys general and private lawsuits Hours, call frequency, registration, state do-not-call lists Varies by state; some protect businesses too

The mistake we see most often is treating the TSR's B2B exemption as if it covered all three layers. It does not.


Are There Exemptions for B2B Calls?

Yes, but they are narrower than most sales teams think.

The FTC's Telemarketing Sales Rule

The TSR exempts calls between a telemarketer and a business made to sell that business goods or services. That is why the federal Do Not Call Registry rules in the TSR generally do not apply to B2B calls.

Two exceptions matter:

  1. You still cannot lie. Since a 2024 amendment, the TSR's bans on material misrepresentations and false or misleading statements apply to B2B calls too. Making up a referral, pretending to be the prospect's current vendor or misstating price or terms is a federal violation even when the buyer is a business.
  2. Nondurable office and cleaning supplies are fully covered. Calls selling things like paper, toner or cleaning products to businesses get no exemption.

There is also a practical limit: if you call someone at work to sell them something for personal use, that is a consumer call, not a B2B call.

The TCPA

The TCPA has no general B2B exemption. Its rules split into two parts, and calling a business line only takes you out of one of them:

  • Robocall rules (prerecorded or artificial voices and autodialers) apply to any cell phone, whether the person uses it for business or personal calls.
  • Do Not Call rules protect residential subscribers. A real business line is outside them. A cell phone often is not (more on that below).

State laws

States write their own telemarketing rules, and many reach further than federal law. Florida is a good example. Its telephone solicitation law bars calling a "consumer, business, or donor" who has already asked not to be called, and its telemarketing act limits covered sales calls to 8 a.m. to 8 p.m. local time and no more than three calls in 24 hours on the same subject. Whether a given B2B call falls under those rules depends on what you sell, so check the states you call most with counsel instead of assuming a federal exemption carries over.


Does the TCPA Apply to Business-to-Business Calls?

Yes, in two specific ways. This is where almost all real legal risk in B2B calling sits.

1. Robocalls and AI voices to cell phones need consent

The TCPA bars non-emergency calls to a cell phone made with an autodialer or with an "artificial or prerecorded voice" unless the person gave prior express consent. For marketing calls, FCC rules require that consent to be in writing. It does not matter that the number belongs to a VP of Operations who uses it for work.

Three things fall inside this rule that sales teams often miss:

  • Prerecorded voicemail drops. A recorded message is a prerecorded voice. In 2022 the FCC also ruled that "ringless" voicemails that skip the ring and land straight in voicemail are calls under the TCPA.
  • AI voice agents. In February 2024 the FCC ruled that AI-generated voices count as "artificial" voices under the TCPA, so an AI agent cold calling cell phones needs the same consent a robocall does.
  • Autodialers, in a narrower way than before. In Facebook v. Duguid (2021), the Supreme Court held that equipment only counts as an autodialer if it uses a random or sequential number generator to store or produce numbers. Most modern sales dialers that call a list of known numbers fall outside that definition, but some state laws define autodialers more broadly, and the prerecorded and artificial voice rules apply no matter what dialer you use.

A live rep talking to a live person on a cell phone is not a robocall. That is the simplest way to keep this rule from touching your program.

2. Do Not Call rules can reach business cell phones

The TCPA's Do Not Call rules bar telephone solicitations to residential subscribers who registered on the national registry, and the FCC applies them to wireless numbers. A business main line or desk line is not residential. A cell phone is murkier: in Chennette v. Porch.com (2022), the Ninth Circuit held that registered cell phones used for both business and personal calls are presumed residential. A few district courts have since gone the other way, so the question is unsettled and depends on where you are sued.

The practical takeaway is simple. If a mobile number is on the registry, treat it as protected unless you have consent.

What a violation costs

The TCPA lets the person you called sue for $500 per violation, and a court can triple that to $1,500 if the violation was willful or knowing. For Do Not Call claims, the person must have received more than one call in 12 months. Those numbers add up fast in a class action, which is why plaintiffs' firms watch telemarketing so closely.

Calling hours

Federal rules bar telephone solicitations to residential subscribers before 8 a.m. or after 9 p.m., local time at the called person's location. Some states set a shorter window, like Florida's 8 p.m. cutoff above. Since you often cannot tell whether a mobile is "residential," the simple rule is to call every number inside the strictest window that applies to its location.

Why the rules are getting harder to predict

In June 2025, the Supreme Court held in McLaughlin Chiropractic v. McKesson that district courts do not have to follow the FCC's interpretation of the TCPA. Courts now decide for themselves what the statute means. That cuts both ways: some FCC positions that hurt callers may not hold up, but some that protected callers may not either. "We followed an old FCC ruling" is a weaker defense than it used to be, which is another reason to stay in the clearly safe zone.

And enforcement pressure is not going away. The FTC reports about 258.5 million active registrations on the National Do Not Call Registry as of September 30, 2025, with robocalls making up most of the complaints it receives.


Usually yes, but the rules follow the person you are calling, not where your rep sits. Here is how the three markets U.S. teams call most often compare.

Canada

Calls to businesses are exempt from Canada's National Do Not Call List rules, so you do not need to buy or scrub against the national list for B2B calls. The rest of the CRTC's Unsolicited Telecommunications Rules still apply:

  • Register first. Every telemarketer must register with the National DNCL operator, even one that only makes exempt B2B calls. Registration is free and is separate from buying a list subscription.
  • Keep your own do-not-call list and honor requests to be added to it.
  • Call inside Canadian hours: 9:00 a.m. to 9:30 p.m. on weekdays and 10:00 a.m. to 6:00 p.m. on weekends, in the recipient's local time. Some provinces are stricter for certain activities.
  • Identify yourself and follow the separate rules for automated dialing-announcing devices.

United Kingdom

UK law allows live marketing calls to businesses without consent, with conditions. Under PECR, as the ICO explains, you:

  • Cannot call numbers on the CTPS or TPS unless that business told you it wants your calls. Companies register on the Corporate TPS, while sole traders and some partnerships register on the regular TPS, so B2B lists need screening against both.
  • Cannot call anyone who has already objected to your calls.
  • Must say who is calling and display a number they can call back.
  • Need specific consent for automated (recorded) calls, to businesses and individuals alike.

For the personal data side, most teams rely on legitimate interests under UK GDPR for live B2B calls. The stakes went up in 2026: since 5 February 2026, the ICO can fine PECR breaches up to £17.5 million or 4% of global turnover under the Data (Use and Access) Act 2025.

Germany (the strictest common market)

Germany's Unfair Competition Act (UWG, section 7) treats unwanted advertising calls as an unreasonable nuisance. Calls to consumers need prior express consent. Calls to businesses need at least presumed consent: concrete reasons to believe this particular business would welcome your call, usually an existing relationship or an offer closely tied to its core business. A published phone number on its own does not count, and if the first call goes badly, you cannot keep presuming.

The famous fine of up to €300,000 from the Bundesnetzagentur applies to unlawful calls to consumers. A bad B2B call is more likely to bring a cease-and-desist letter (Abmahnung) from a competitor, a trade association or the business you called, along with legal costs and contractual penalties for repeat violations. Data protection fines under GDPR can also apply when the call itself was not allowed.

In practice: treat Germany as warm-calling only. Call German businesses when there is a real prior relationship or a clear, documented fit with their core business, and use email, events and content to start the conversation otherwise. Other EU countries set their own rules, so check each market before you add it to a calling campaign.


What Makes a B2B Cold Call Illegal?

Put the rules together and the illegal patterns are easy to name:

Practice Why it is a problem
Prerecorded voicemail drops or AI voice calls to cell phones without written consent TCPA robocall rules apply to business cell phones
Calling registered mobile numbers without consent Courts may treat them as residential under Do Not Call rules
Calling again after someone asked you to stop Breaks state laws like Florida's and the FCC's internal do-not-call rules where the number counts as residential, and burns your brand
Calling outside legal hours in the recipient's time zone Federal and state hour limits
Misrepresenting who you are, why you are calling or what it costs TSR misrepresentation rules apply to B2B calls since 2024
Spoofing caller ID to mislead The Truth in Caller ID Act bars it when the intent is to defraud, cause harm or wrongfully obtain anything of value
Running a "consumer" offer through a B2B list Calls about personal-use products are consumer calls, with no B2B exemption

None of these are things a good outbound program needs. That is the encouraging part: the compliant way to cold call is also the way that books better meetings.


A Compliant B2B Cold Calling Setup

Here is the setup we recommend to clients and run ourselves. None of it requires reps to memorize statutes; the system carries the rules.

1. Know what kind of number you are calling

Tag every number by type (company main line, direct dial, mobile) and by country. Line type drives risk: business landlines are the safest, mobiles carry both the robocall and Do Not Call questions, and international numbers follow the rules of where the person is, not where your rep sits.

2. Have live reps place the calls

Live, rep-initiated calls keep you out of the TCPA's robocall rules. Save prerecorded voicemail drops, ringless voicemail and AI voice agents for contacts who gave written consent, or skip them in cold outreach entirely. A rep leaving a live voicemail in their own voice is fine.

3. Scrub before every campaign, and suppress forever

  • Scrub lists against the National Do Not Call Registry and the state lists for the states you call, even for "business only" campaigns. It is the cheapest insurance you will buy.
  • Keep one internal do-not-call list. When anyone says "take me off your list," log it once and suppress that number everywhere: CRM, dialer and email.
  • Re-check before you re-import an old list. Re-uploaded spreadsheets are how opted-out people get called again.

4. Let the dialer enforce calling windows

Set calling hours by the recipient's local time zone, using the strictest window for each state you call. Do not leave this to reps doing time zone math in their heads.

5. Open every call honestly

Say who you are, what company you are with and why you are calling, in the first sentence or two. For example:

"Hi Alex, this is Jordan with Acme Analytics. I'm calling because we help finance teams cut month-end reporting time, and I wanted to see if that's even relevant for you. Did I catch you at a bad time?"

Train reps to accept "not interested, don't call again" on the first ask. Arguing with an opt-out is both a compliance risk and a waste of a dial. For more openers that stay direct and honest, see our B2B cold calling script templates.

6. Keep records

Record calls where the law allows (and disclose recording where state law requires it), keep consent records with source and date, and keep your scrub and suppression history. If a complaint ever comes in, records are what let you show what actually happened.

7. Review the setup when something changes

Revisit your dialer settings, scripts and target geographies whenever you add a new state or country, adopt new calling technology (especially anything with AI voices), or when a major ruling lands. The law here has moved a lot since 2021.


Is Cold Calling Still Worth It?

Yes, if you run it this way. The rules mostly punish shortcuts: blasting recorded messages, dialing bought lists without scrubbing, and pushing past opt-outs. Teams that call targeted lists with live reps and a relevant reason to reach out stay well clear of those lines, and those same habits are what turn dials into meetings.

The phone remains one of the fastest ways to start a real conversation with a decision maker, especially when it works alongside email and LinkedIn rather than on its own. If you are weighing whether to use it at all, our guide to warm calling vs cold calling covers when each approach fits, and our cold calling benchmarks for B2B teams show what good looks like.


How SalesHive Keeps Cold Calling Compliant

Most of the setup above is built into how SalesHive runs cold calling programs for clients:

  • DNC scrubbing is built into our platform. Lists are scrubbed through our DNC.com integration before reps dial.
  • Time zone automation keeps every call inside legal calling windows, so reps focus on conversations instead of the clock.
  • Live, trained reps place every call. Our core calling team is US-based, with a Philippines-based option as a separate path if that fits your budget better.
  • Every call is recorded, so you can listen to any conversation, and your dedicated strategist uses real calls to coach reps and tighten scripts.

Since 2016, SalesHive has booked more than 106,000 meetings for 1,500+ client accounts. Engagements run month to month with no long-term contracts, and you can see current packages on our pricing page.

If you want the pipeline from cold calling without building the compliance machinery yourself, book a strategy call and we will walk through how a calling or appointment setting program would work for your market.


The Bottom Line

B2B cold calling is legal. Live calls to business prospects, at reasonable hours, with honest openers and real respect for opt-outs, are exactly what U.S. law allows. The legal trouble sits in automation pointed at cell phones, registered mobile numbers, ignored opt-outs and international calls made without checking local rules.

If you do five things this quarter, do these:

  1. Tag every number in your CRM by line type and country.
  2. Turn on Do Not Call scrubbing and one global suppression list before any campaign launches.
  3. Keep prerecorded, ringless and AI voice messages away from cell phones unless you have written consent.
  4. Set dialer calling windows by the recipient's local time.
  5. Give reps an opener that says who they are, where they work and why they are calling.
The short version

Key takeaways

  • B2B cold calling is generally legal in the U.S. and many other markets, but it's tightly regulated by laws like the TCPA, TSR, state telemarketing rules, and international privacy laws, especially when you're calling cell phones or contacts outside your home country.
  • Treat every outbound motion like a compliance project: manually dial business lines, avoid autodialers/prerecorded messages to mobile numbers without consent, scrub against Do Not Call lists, and honor opt-outs immediately.
  • The FTC's National Do Not Call Registry now has over 249 million active numbers, and the agency still received about 1.2 million robocall complaints in FY 2023, clear proof regulators are watching telemarketing behavior closely.
  • Cold calling is still commercially worth it: 88% of B2B buyers say they want to hear from vendors while researching, and 57% of C-level buyers actually prefer phone outreach, as long as it's relevant and respectful.
  • Plan for persistence: modern data shows it takes about 8 call attempts on average to reach a prospect and 20-50 total touchpoints to move a cold B2B contact toward a decision, so a compliant, multi-touch cadence is essential.
  • If you sell into Canada, the UK, or the EU (especially Germany), you need separate playbooks, Canada exempts most B2B calls from its National DNCL rules, the UK allows most live B2B calls with opt-out controls, and Germany heavily restricts unsolicited calls with fines up to €300,000 per violation.
  • Bottom line: cold calling isn't illegal, but sloppy cold calling might as well be. Build a clear compliance framework, train SDRs on what's allowed, document consent where needed, and lean on experienced partners like SalesHive if you don't want legal risk sitting on your own balance sheet.

Frequently asked questions

Is B2B cold calling illegal in the United States?
No, B2B cold calling itself is not illegal in the U.S., but it's regulated by multiple overlapping rules. The FTC's Telemarketing Sales Rule generally exempts most business-to-business solicitation calls from its Do Not Call provisions, but the TCPA still restricts marketing calls to cell phones made with an autodialer or prerecorded voice, regardless of whether the phone is used for business. State laws can be even stricter and may not exempt B2B at all, so your outbound motion needs to follow federal and state requirements, not just the high-level 'B2B is exempt' narrative.
Do I have to scrub B2B cold call lists against the National Do Not Call Registry?
From a pure FTC TSR perspective, most calls between a telemarketer and a business are exempt from the National DNC rules. However, the safer modern interpretation, especially as courts and states tighten enforcement, is to scrub anyway, because mixed-use and mobile numbers can be treated as residential, and several states extend protections to B2B. In practice, most serious B2B sales orgs assume they must scrub and treat any number on the registry as off-limits for marketing, even if it belongs to a business contact.
What's the biggest legal risk with B2B cold calling today?
The largest single risk is TCPA exposure from calling cell phones using an autodialer or prerecorded message without proper consent, because statutory damages of $500-$1,500 per call multiply quickly in class actions. Secondary risks include ignoring 'do not call' requests, calling outside permitted hours, misrepresenting your identity or offer, or violating stricter state laws that don't clearly exempt B2B. For international calling, failing to respect regimes like Germany's UWG or UK TPS/CTPS rules can lead to regulatory fines and reputational damage.
Is cold calling B2B prospects legal in Canada, the UK, and the EU?
Canada allows B2B telemarketing, but you must still register with the National Do Not Call List operator and follow telemarketing rules, including honoring internal do-not-call requests. In the UK, most live B2B marketing calls are permitted if the number isn't on TPS/CTPS and the recipient hasn't objected, but you must identify yourself and respect opt-outs. In the EU, particularly Germany, rules are tighter: unsolicited B2C calls basically require prior consent, and even B2B calls generally need either explicit consent or a defensible 'presumed consent' based on clear business interest, backed by documentation.
Does the TCPA apply to calls made to business cell phones?
Yes. TCPA restrictions on calls made using an automatic telephone dialing system (ATDS) or prerecorded voice to cell phones apply regardless of whether the phone is used for business or personal purposes. That means marketing robocalls or autodialed calls to a prospect's mobile line typically require prior express written consent, even if they gave you that number on a business form. Manual dialing reduces TCPA risk, but you still need to respect DNC registrations and internal opt-outs.
How many times can my SDRs call a B2B prospect before it becomes harassment?
There's no magic global number baked into law, but data and best practices point to around 5-8 calls spread across a multi-touch sequence as a reasonable upper bound for cold outreach, with some teams going to 8-10 for high-priority accounts. Modern benchmarks show it takes about 8 call attempts on average to reach a prospect, but regulators and buyers alike will take issue with rapid-fire, daily calling. The key is spacing attempts, mixing channels, and immediately stopping once someone asks not to be contacted.
Is this guide legal advice I can rely on in court?
No. This is practical guidance for B2B sales and marketing teams, not formal legal advice. Regulations change, case law evolves, and how rules apply to your specific motion depends on details like your industry, data sources, tools, and geographies. Use this as a framework to shape your sales process, then work with qualified counsel, especially if you're doing high-volume dialing, using autodialers, or targeting multiple countries.
If B2B buyers prefer self-serve, is cold calling still worth the effort?
Yes, if you do it the right way. Research shows 88% of B2B buyers still want to hear from vendors while they're researching, and more than half of C-level buyers prefer initial contact by phone. At the same time, much of the buying journey is now self-directed, so cold calling works best when it's part of a broader, insight-driven sequence that adds value instead of pitching blindly. If your calls are helpful, relevant, and respectful of boundaries, they'll cut through the noise even in a digital-first world.

Book a strategy call

Ready to fill your pipeline?

Choose a 30-minute time and we will map out exactly how SalesHive can book meetings for your team.

Category: Cold Calling